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;$4) METHOD FOR FINDING REPLICATED TERMINAL 

v f 57)Abstract: 

FfROBLEM TO BE SOLVED: To automatically find and exclude a 
replicated terminal in a communication system, consisting of a center 
afid a plurality of terminals. 

SOLUTION: The center and a plurality of the terminal are connected 
through a communication network for ciphering communication with 
iridividual session keys. The center sends challenge information in the 
c|ise of delivering a new session key to the terminals. Each of the 
terminals sends response information obtained by ciphering terminal ID 
ajid a terminal random number to a center public key to the center, 
4hich retrieves a communication log and inspects the presence/absence 
of terminals, having the same terminal ID and different terminal random 
numbers. If corresponding terminals exist it decides that the replicated 
terminal exists, and the session key will not be delivered. Since random 
number generated by an original terminal is difficult to replicate, the 
replicated terminals cannot generate the same random number. Thus, 
tfte existence of the replicated terminal can be detected. 
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mmMtatiR] 

i ( I I D) *^t s ®«V^TACO«[SJS^^l 

iwsB-b > * c f* , -b > * w« it s ox-m^m^m^x e i 

b $«^- L T tirBtf*BB:ft: D i b t MiaSifi^iliB? R i b £ 
*»T, ttS^MMYi (t»3WBWI»fll 

n^«i&i*i8i*w««Si) Tmiaa^ESEXDi^ 

S^SL, flBBa*EE^Di b £D^giE@IRA<iEL<, 
o«E«ttft«3W*t^lWE»* TiOTmr»B4*^Sll& R i b 

»B C K i b fc J: y VttWff K i b £ L X it > $ 
3t E C i b <t t T tWIB«jR T t ic&ffi U 
ME^Til*; lftElz^lS^;fcECi b £3*{IU M 
IB4i*SLi&Ri b ^^rtii^CKi^±i*L, #If2-feV£ 
BS^S: E C i b £mie&ffi8tC K i b lcj; y ft* LTNBB 

«TB«*Titt.: Kb|cfcMt*B*a»R» b (± 

tttl!24«*gtifeRi b lc^t^»*ISE^Dj b 
mm^mUX D i b <t MIB««aft R i b £-tr > * &BBBY 

£, *tlH^SL»Ri b *^^i®MCKj^±|S-r^3S* 
«*aft£fft«R£, ®ffi«aKi b ^HfiBH^iifilCKi b 

13 * y mmt i>fc-tz > * e c i b £*tri3#ayi c k 

i b lc£ yft*fc?**BRflf4tt#*R£*ll*.* 
WfE-te>*c(*. -bV*»ffi«sct?ffllBfl«5Rl!t#*Ei 
b ^tt-^ Lr^ffi«5KKSIiES: D i b <h»IB«*a»R i b £ 

»£&M«i«^tt#¥R£* #iie3S*KljE^:Di b ^a«* 
&Bfl«Yi (1r>^*<«l*W«li$*aUTl^*Al* 
Si): rttB?«BKXME¥RJ:, ^> 
Kwtlz. ^ltsoiHj||l^ffltfcWj|B$iB^E»Ri b 



tttt-r^tta^iftt, i»iB«*BiiES:Di b a>*H«**< 
ie l < . A>oiwKMaa«A<^^m«a«*Ti(D«riEs« 

*gL^Ri b ^ffl^TffriB^ii^CKi b $±^t^)H2:>^ 
M*&R£j*¥R£, «rlB*aBCKi b i=J:y»*flt« 
K i b £ B£*Hb LfcHWE-b MMMfc E C >"»**!■ dW; 
jlBW^t^Ris ^K-i2>^0t-^XECi b $mB3S^ 

3 ] ttEBB*£JS#Rfc J: ttEBBttft 

[MSA 4 ] MBBKXftJKVBft J: UWBBMEXtt 
?-fe-vBBEfr» (MAC) tJfll**¥Ri:Lfc;:£* 

mmmmm±f&^m^, BEB*a»Ri b «*o>** 

[tt*B 6 ] IKB&HBlHfls^R & ttBttMMh* 
tt#¥P6fcft?l-Cv Diffie-HellmanB**a**t;Sl« 
*BL*fc«***01 0*B^r«t*»r**Ri:, 
«#Ufc«Sa*!>r«l*a»£ LTffll^ft*Ri:*Rit 
fc - <t ««• i: -T « 2 IBmcD^E^SIi^^^^^o 

[R*B7] flie^^^Clr. HBt^WXEC 
» b l=:^ yfe-$*BB*M» (mac) «*«>**RSR 
It. BBM^Tilc, K^A/^StyftLt^tt-r** 
Pft * IS it fc c t £ 2 IB«0«ES!^^^ 

[I»^3S8] ^IB-bV^ClC. WIB-b>^Bt#^EC 
fc, a#^rtyt*LtttW+4#R*RltfcCt* 

[B»ai9] ita»e««KW, ^ta-trv^c£#[ 

T >U —iK ^J7 m «-i ddk ^ Ui *tl ALii -4- V* KH - I ■ n I t 

TO10] ffiK$8MM8Ki»>£ % |JB-bV*Cfc 

« L fc Hz > ^ iL» Z i" t f}IEttf*3l» R i"r= *fT * 
BKStDi^«*»**8ii=*y*ijfJ-*|glES:** 

jiflttWrK-tzvd'StSitz i" eitriBSS* t i i= am -5 -i* 

2] TttK-fe^attZi"*, 
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IE«0)'ttlS(a»^li6Jt*3tb 

[R#Sh 3] 9trK«S^Ti{z v |g--7^>K(cj3L\ 

^E^^MO^ti^^Sm^^^i:, B- 
7 ■> V Kl=*^Ttt«l«W ettEBSSJfttt i»»ttB« 

»MMBS\ W'E»*SL»Ri b * V±*lfciMB*a«l 
c K iWc £ y R»%{t L "C'igaf * £ Kit fc 

[1**14]'; ttlBNI^Til^ fT12-bV^CA>i3(D 

^^VFII^Bl^^-tfiBl^toWKt, MSB 

WE-b C l=wa *«*^ SSa».**K fc t R 
ttfc - fc CWB£"r«B*J| 2 EttOBHBS&A* 

At^^, C fc £«tk fc *" «B*H 2EtiG>&K«£BA 
[1***16];. WE-b>^^IJB«|YctWlfE-b>*W 

msc^ttEttx^HMYi^tireMXHmsi^c 

ffeJTf **Kfc> WE-b>^^B«lYc«±i|3R|ri2* 
-T&SM&fc, ttE-feV^SttMscfc-r^roiWEWl* 
^B«Y»4t*l*E-lr>^cicfi#-r'S*«<t, ittBtt 
*W«BSi*«f5t , *MEi|IS*T i f=R#-r*¥Kt* 

icaafc:: fc t^NK^'T 2 E«a>*Hfl|3K«JI 

MM17]; «rE«*SL»±tt*KI*. BCSl*« 

[SfrRJS 1 8] ItiSEv 3/iIGK b <DiEffiw^4 3 i-£> 

**E^a*;Ti0tt*^BB8lYi 
M£tt9LTl^««tta««M8i) fCcfcyWE^- 

[«no>iMittflm] 

[00 0 1] 

aa#&f=iit%. 

[000 2] 



[tt*<Dttff ] -i? v > t bb®«»ik * a «aa *>x * 

T* BlT©*3_**3**ftft 0 *afrfc, -b>*l*. -b 

v*>ai/ai?a*ici«#fta«*ff*?o 

fcttA^LT, -b»^6«>B»a*t*#-r'4. ir> 
*BK*fr43* 

[000 3] qioj:?.ft*j*T?H:, WS&BSl^lcSj* 
l=B*fc*M-r : **A<BBi:**. fct, ^FIEar? 

Tl>£ 0 ~jKW!3s »*>'<-x/WXfcLTiC*-K 
S«*lc^(DIC*-K*»AL-C«ffl1-S*^A< % 

[0 0 0 4] L^L^^b. Jamaica— K!t*H"S* 
*B*»»-f ^Power Analysis Attacks* £ S*v 

<c*o *B«*i=j:6iif*aaa)«»*RCfcdbiw % '« 
eft <r ttftfeftt^ 

[0 0 0 5] BB»3l5«**-j-**3*tL-CI*, Bt#a 
Sfc^ofc^&tf&ofc. =«>j:3a*ai*, &J?.CDfft 
[0 0 0 6] ZfrizttmtZtztblz, ttM^^Mi: 

j*art-****t, xbi [tftTai,a«*»."S«fD 

n, -ITSfcB Lfca >^>^E«r=felt6=F 

]E»lA*<D*lW*U4a f " 2000^Bf#i:ffl*g-b^a.'J^ 
-f v>tHv^A. SCIS20QO-C09, 2000. ] X'til&ZtlT 

[0007] 

***«Ktf#**a>-cfcoT:t, aft*fcMJ»tftt& 
at^o B-5-*>Ktj$^rs i»**fcya»a>w* 
HMi*a3c4:3ft«'e#a^. ^mnm^miK 



[0 0 0 8] **W«*/±Effi*<DH«**aL-C, *g 
[0009] 

ttK* *BW*tt. fc^jtnjS (r>l*ik3») 0>tt* 

I^KS: £H3K«ttMilc <fc >J L v iS*S||iEA £ «*a 
» t * -fe > * ^BBTfBjffHfc t Xtrnm^Xt Ltt> 

*i=a«u -fe>*wffifln?ffli*pt^s:$a 

o*tt««»aB^Bfftri^B4RCB9*««tt 

su «i*Bits:<D«MaEtt**<iEL< * A^m«a«*< 
u c.a>«*isLft*fflt^T. &aft*£jftU *a«c: 

[0 0 10] CCDct^ML/cC^fc^y, ajfii*!*? 

f *BE**i*«>W*«=*V**L* *S*a£fc<!:5S 
ffi** * (©aMBlc* y Bt^jb LX-fe lza« L 

m CrnXWEm* * oB*# & Att«B*SURA<& &*i 

mmm * a*t* * * i*g>t? > jusMtt* s - 1 

[0 0 1 1] *fc % 7»-**-X*»*. v^>^Ct 

fttMtlcLfc££l=J;y, **-Xfl>-thf X*/J%* 
[0 0 12] BKX±A¥»feJ:imB£ttK¥ 

*6SII*©K*t*lftCC:4!:A«-e^*a 
[0 0 13]*/-, BK*±**S:fccfcr;BiEXttK* 

-»BB1W (MAC) SrtfcLfc. £0<fc 5 L 



fccfcicjiy,. 4r>*J±BH*9«BtS»*=fr7Ci: 

*tf (oafctoBHi-MAc^fiifflTf*'*^^, asa<t 

[001 4r*fc,"*aB***»«u 
***a«ttrtti»-r*¥at;ufc 0 cc^dftts^ 

[0 0 15] *fc, ^MB^b^S^cfctic^Mfttt'* 
«**R0>ft4i.yt, a**ffll*fcB#*S* CfllAfiDi 
ff ie-Hel lmahatft*&) *BVT^.LfcB*HJfc4: L 

-So 

[0 0 16] _*fc, Hz>*Bff#*!cMACt#*#r*ar 
^**yf*Lt*ttt"*»J*4:Ufc. C0>«fc5.«*rt 

icufcciicky, a#^*y-r*L**a=*BT? 

[0 0 17] &t z% i^lMXI-T-r v£;U»*££ 

Sf*r*#^«yr*L*3|*tt'#-*Bi«tLfc, ccd 

t»BTf-*Ci:*<*#^*y+*L«»ffl-t?**« 
[0 0 18] *fc, iz>£<t^3fcc0-fe^> 

*y, *>*t&m*omzfti\x-mtfy%ft*mm*> 

BKl=«rt^#*-b^S/g>«t**T**p 
[oo i 9] .*>*fc*»(MMn? 

[0020] -tr^^OiiflftSiLTiiv^gL^ 
SiiftlL, lWrf2-b>*a*l=»UT«l**<BllE**^Jit 
■fe»l*«iBBnXtaiB'#-*Ci:lcJ:y, g^liE* 

[0021] ^fc. -tr>^aisj. a»<o«*i^a<o 

izv^SL^tLfc. -a><fc9a«rt;irLfc = tiwj:y, 
[0 0 2 2] *t i^^>KicteorW!Bfli#3&«a» 

s«*a»$«*«^3tic«fflL. 

ittitih&IHiia)iiMl«tt»a> a wsu Lt 
*a«icjtytt-*ftLTBa+*«tiai:Lfco cwj:? 

[0 0 2 3] &tz, «*^-b>^iM&<Da«*ft«"C* 

fr**Hl**fc*™«*i::«SL Bt***>*fcB 



tLtz 0 Z CD<£ o tm&lZ LtzZt\z&i) > m^tfizy 

[0024] la^fAj, m«»*vxt-* 

[oo2 5] *fc. a^aa*i*#s*, rai:a»*aj 
±G»0>m * n c m * t ft t* * & m * it 

[0 0 2 6] *fc, ^;U-^«(DBB*CDJ**ICfcL\r, 

f*tt*tt&B) ;i=js y*ju- ltsmb*© 

[0027] 

[jBWttfcffitfftlB] BIT* *aB0ltB0>Mli::-?li 
[00 2 8] C« 1 <&**0>#») «£^<»* 1 CD&JS 

*Blc* i»*"?*^Ufca»*<ttSttffl«t*Ci:*fiJfflL 

[oo2 9] ant *«ma>Mi<osiko»nr=6it 
««MX«JIXtta)jKttlflT?A«. 1211 CifcUT, 4r 

a«KNfi, **aftroft««*fctt*«aafl 

SffftSRHNfcSo :7x-X#2f*, -b>#cA^«| 

*t ii=iz v a isa-r *fc«><D¥tt**if ft ? 
[0030] [2121*, ^»no>sg i a>Atto^flircfeit 
2dfcl>T, a»^**Ri I*, S«a»*±l*f£¥ 

fe& 0 BKXMkK¥ft4li< **»«ittfl«*<b**tfc 



[0031] si3i* v **wfl>*ifl>aaso»»icteit 

H*t«*a«k*'fe^*4MB«iT?i»ftr**RT?fc 
[0032] ia4tt s x&womi&mmof&mzfti-t 

MM**I*»fl«M**Jl7i-X (7i-X 

-x c^x— x#2) ©a^H^ft^e 

[0 0 3 3] ±IB0J:9lcl||*$ttfc*«Wa)Wia>* 

JI«>»Blctert*aiB«l*»**aa>»tttKW-*-*o 
MOU:* Bi £#KBUT> «B«*ttJL#ft4>JKB*tt 

ftu*3l=l»ft**iTB*T*6aB«*ifcl|*a 
■kRi^*3KBKXC, -b>*CT?WEU «WBK* 

6*ftft«l*ail[RiWa«4ti-C^ftO**lca)*, 
C(7)^5feSL»Ri b lc»S LT4*5fcT ilciz y i/ 3 VfitSKi 

^VK*#T»*y, **B(&**-ettftl*. 7^>K 

S^dlc***"*****. BBtfBBlcfty, 

[00 3 4] BBB^BJU^ttrdc, agSjj^M7x- 
Xt-lr^i/3>BK>S7x-X<D20a)7x-X^e* 

(7i-x#d *tr> 
it. ^©ttsSTi^^^c^HBic^ynt^bLx 
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2l7x-X (7i-X#2) -CM*. -fe^ClS, ftKSi 

KMZ J: y BtWb t r K2Sf4 • 
[0 0 3 5] **U>b-U*#>XBE*ftlBT*« 

X7K>XRESttT-tr>^Clc^ig1-^, 0 Cft£-fe>* 
»*tt, -b>^CI=M3ka)WII«1K«t«jMI^6 

[0036] «5K%ikRi b cE)flHiibtKm-r«. nc* 
*»»«*«»-r **a«i*ic» l -c«*a« r , b £$ 

® IC-T * fctolc, *b V * fcHflttf:: £ y AlXaft R i b £B£ 
flHb"T*o Diffie-Hellmantt^#^(7)J:-5^SL 

[0 0 3 7] f-^K-x©**SK«t*o -bv^c 
Ri b <t£ifcl&LXs **Ti<MMMI* 

Fii:a»*fflt>*(0-e. *«tt*A<#*EL*^»y. n 
fc«u w*a»Ri b ' ^w*aMRi b a>£«e>^*a( 

«*0!>ai!kT«aS**M*ESlT?**lV *fc* .MM**' 

«s*a»Ri b ' ^flxaftRj^icm 
«3Roak a efei«mfc^A«^ 
t^r*t©«*^t % a««**ft*fti=cfcya[»a»5K03 

[0 0 3 8] ^iig|GKi b (D±^^KBjr^o 5EL<BIS 

cid:, ^o«*Ti«)«*a»tttor*iiit***^ 
[0039] t^i>3>iasKi b a)Bt^bSltt^f 3* -b 

•fc-r*. wmetii*. -b>*cfcBi«i=, «*a»Ri 
b J:y*aMCKi b *4ia'r*« ^mmo^m^xiz-j 

(l*a»rtWa:rt*-tf, 



£ 0 UX7K>XRESi b (D^ 
(Message Authentication Code : / vfe— S^BEEIf 

[0 0 4 0] tviss^mswo^mztitM-fZo 
*ci*. -*aiatLi=j:*'irv^3>«a)iii»iz»«-r 

*<1MM*«JIM1, « *6»ibT?**o 
[ o o 4 i ] -b * v s >«SKi b A<1*»(D«#*tii^r 

ii*, B-9->^KT?**itfni:Ji*a»t«^r. *b 

fr**«-x?i«flHburEa-rSp 
[oo4 2] *ft«»ft*Kiurr*. ^*Ti#®ii:t 
a«-e*ft^**^w»Lfcct4ifi=«ky. * 

[0043] W±<D*5lc-r*zi:lcj:y, ttfltti^S- 
IS3|-e£$o IE^d«mTi^$fe^bX^>XRESi b ^^ 
«Ls «S«^UX^>XRESi b ^ilHlL^lNii^lZ 

[0044] «2IC, H2. ESI 3 ^ 04$#WL#tf 
ttaMSftJLft^M (7i-X#1) ©fi-X^y:* 
f=OL*TKW1-«. *ISW:i3^t, B^L-Ct^^ 
««T!**i/XTA*MI** trv*«*gBi»Sc<!:, -b 

[0045] H4l=^1-7x— X# 1 - 1 T?v BHIifl* 
CHAi b = Z i b 

[0046] -2?, 03IC*-r4a*Ti 

tt, B 3 1I=*U, 4»5SSLSSkR* b ^^Hfe 

•b>^i c*\e. i 5F-vu>eJCHAi b i:Lr2se>^.fc-iz>a<a 
(Si. (i I! 2i b !i Ri b ))^, ESES±fiK*sio-eSfi»* 

5. fcfc'L. (x||y)l*. xUfiitL. y*Tfi*i 
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V * >U*« : SSSfcagijES: D i» t r % . 
[0 0 4 7] ■fe>*&Bg&Yc£ fflL>r, JS^IDO) i 
t, «*a»ft>i:, «*Bli*Di'»tl=»-r*(»** 
^* 

Ei b =Yc[ I It Ri"|l Di b ] 

= Yo[ i II Ri b ;||SIG(Si, (i || Zi»|| Ri»))] 

4MMDrtfc*«11-e4JiW-*. fcJSU x[y] 
I*. y*«xTJBHHtt«ct CHS, 

RESi b = Ei b = Yc[ i II Ri b ll Di b ] 

= Yc[ I || R|"||SI6(S|, ( I || Zi»|| Ri»))] 

tit, aMt*«2-e»«i-*. 

[00 4 8] 7i-X#1-3X\ E)20Hzi/* CI*, 

ss«u ariwtwifRs-c, -b>*a>saso 

£«oTUX7KVXRESi b S«#L-C, 3«3t5iU8Ri b £ 
*«. Btt*«illi*«4-e. IliKTiOttKAIIttYit 
ffll't, SIG(Si, (i ||Zi b ||Ri b ))*fetiE1-So WE 
ttJR*<ELluft*l*, S6*TifciS*fl&Ri b £!£iiEL 

[0049] 7i-X#1-4t% •bVSCIi, &tt|#. 

asa-civ&ii, y -b * •> a >asKi b /i<*Kisa>* 

7 i —S"<-x^ai*a3SRi b SIBSL,-Cs 7i- 

o*y-fz^i/3^«SKWEjH^c0*AI*, t- 
^"<-Xlci|5«**Hfctti*Sl»Ri b ' £gffiLfcS»*Sl 
ft R L 6 7 1 -X# 1 - 5 ^Jtfc. £ 

f -5. 

[0050] 7i-X# 1 - 5T% -fe>£Ctt % 122 0) 

[005 1] 02, H3, H5£#B8LfcA< 

-fe^»>3>«EiSro¥ISS (7i-X#2) »#Xf 

[0 0 5 2] E)5ICjj*-f 7x— X*#2- 1 T?, -bV-Ji C 
I*, #Mlt4ft9fR8l::J:y\ -tr-y>a>»SKi b $^ 
a &CKi"-CBf^b L fc -b > * BS^X 

ECi k =CKi»[SKi»] 

£±j£l-c, a«*®2(c«fcy«t*Tii3SS«^§„ 

[00 53] 7i-X#2-2-C*. *g*T f l+, HWL 
T*l»»«*«l=*y, ■te>*«HMtECi l ' (=CKi»[SKi 
b 3) «*«•#■«■. **a*Ri b S*attCKi»4:tT, H 



3fl)*l^a^S9ICJ;y, ■b>'S»Bt^S:ECi b (= 
CKi b [SKi b ]) £«^U •fe-v>3>@SKi"£»§ 0 as* 
Ti#, -bV*W#*ECi b (=CKi b [SKi"]) 
fcfrofc*^!*, 7i- X#l-2lcfct'«T±fiELfcU 
X*°>XRESi b £, -fe^ClcSg-f 
[00 54] &4I=, a»ife$»cD!fefr£i8ejj-f.s <> 4» 

frofflitsfic&aiiasjssgrottsa t n cm a t 
ftusx-tsdJAias^octj cm*, aa& 

8bita«n±*»i*ft#s»fcf. 

■*7-f hy-fXftif*W«LfeKtta*±)MI 

*a*5/-K*A*4:^*«aa*ai*ii*tei*ji«a 

[0 0 5 5] Cfl>«k5'tCv-h*t LT, WT(Dt<0-\>-?- 

• «t*fl>»^i=H-f *B»m. oft 
[0056] *5ic s sattKon-cimn-r*. 

assss * £«yfi l -c ss^-r * c t * i w £ 
«i!!^a t tii % * <) v-)-)im*.<DW®m z m& t x t> § 

■*a*»tf) £»«fr«>»^i:, MISS 

Lx®*mm0Mm&u#-%* 

[0 0 5 7] ?fe»l* v *>)Z>1-)l>mmt1:0)£-£\z^ sk 
[0 0 5 8] «t3fEU«»(D5*., -B#fllS!EU«C»-CI*s 

:Wrr> 3 fcibOMUUKflau 

* U S?+;Ht*fl)-b 7 a -o-tr v V 3 >«s 

^Mx-bZc 
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[005 9] *Jt»a>^"»l^feltS*«»3R«**ac 

it. -»*iiitu*»i-»Ltaii'«***»»-r4ci:* 

[0 0 6 0] «P*«ltLttSl«. ^;jSL<£!Iltlctt#L 
[0 06 1] »Jtt Lt-, JH*W^W"F0>2O(D*AA< 

•***fflL«i(t*«y, attic* «*««i*«>ji5jii* 
[0062] zoiii *ys?+;m*«)*ffl#*«, * 

[006 3] Jfcttttttt -fe y . *»«***»»Tf tt, 

i. ttV*ttlM»ft&ft«i|3K®IMa««tt^«. 

6. NfljiMHMA, ttMilt*#*. MACj3*tf7*-f 
[0 0 6 4] «J61 t 2l*«*WIZfiwy 

ess 3 <D*«fi*antti=i*Rrttfc*A< % &^#0fiffi#* 
xiiniv'a**yttcy^«:i^vjN«n«fe» 

*Aiwwji*ftWif, *o«ra©a»±j*»s* 

WU &Mftl*4£d& Lrftftt024bitaJS<DRSA«^ 



•^ElGama I H§ 1 60b i RE I Gama I jfe £ 

'flfflU MAC^Vttt*128b'jtfi*a>*a*Bf-*-\b,-tt 
*J 1 28b j t JMc^Btt \ ? v a. H R £ f ijfflj L , 7 s -r 
;U»*<t Lr«*tOi4bitSjt0DSA»«^RSA**^ 
&£160bitfI«<D«RDSAS* *fftB« Z fc l=«fc y * 

[0065] nW«LWi;*r*Wttl^t'K 

.Ki±^«*:y«aa?*ifcmtt 

[00 66] JASBf £0 7 ^ > RDir * v 3 
RESS»«Lftlt*U*. •IUtt«9i/9>l«ff6 

h&ufctt, nnmzmmtitiZo a»sst^A< 
[0 0 6 7] ?*y. *y?;^jutt* 

(DP* 1 ^-Ct U*7f*>XRES£S(g-f *U*s ttSMMC 

i #i*ux7K>xREsta«-r»«>-^ c 
[oo6 8] *©*»ic»-r*fiAtti=ot\riiiW'r 

««JtflHrcl*, bX7K^XRES^H^|-r ^Replay At 
■i=*y«#ftLfc-feyVg>«*E»1-*fl)-e, ®ii 

or. a*<D*r<D7^>K(0T-^^-x 
J#-r*Ctlz«-6o •fe>*^ < fc5«|5i£a>IB*LlzBLr 

[oo6 9] »6ic texttff&ttttt-cx^cimt 

&o **3*l±. ^^e33bit, i£ - WMt1O2toit0>RS 
Ai:U. «6*ai4. P $1024bit. q$160bit, 
BB».C0ttS**128biti:LTifc«+-6o fcfft, RSAI4- 
SSIc^ < mi* 6JH4*HA**SW=<fc y ^SScDilS* 

^-*1Q24bit«)K4rlUI*1B«1 HtSIt^ * 
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T-V UV^iliiS (1024bitx(k+2>) 
^Y>>^jH*S 0.16x(2k+1) 
l/X7H>^a«* 21 76bi t 

• UXtfvxttES*** .0.16 
f-^-^WX 2176bitxn 

[oo7i] x&mnmto&M&M® 
aa - fc * fflffj l x as* ioa> jtn z t x*mm 

[0072] <*2 0£jfitf>^Sg) **9J0>»2<&*4S 

yot4att?«n«aiMii::* y jM$ftfea«i' 

m l x*s* i Dti*tt * « c <t x&«* s » ji-r 
s#&x&& 0 

[0073] meits *mw®mz<!)nMo)temzft\i 

{s&ni*. H4Hreaa-TO*aa*fcf**aaaaa 
<*xfe& 0 «*Tii*. -fe>*cfy^-^ii-cB»*a 
«*fTaoa«WTf**. «*i**»*fty, i \t& 

ft5HHCeft«o ?x-X#2l£, *>*c^t>**T 
[0 0 7 4] «7I** *9tm<DM2o*ib<D&m\zntir 

[0 07 5] J;ffia><fc5r=fllfill**lfc*HSW^*2(Z)* 



[0 0 7 0] 

x n 128bitx n 
£L 
1024b it 
0. 28 
0. 28 

128bitxn 

[oo76] ttsmxxji:&actt* imi**i?x- 

So a»«*l6ft7i-X (7x-X#1) Xft, 

i i . ^cdss^ t itf-tr >2 c co^Ri«i= £ y BtHUfc tx 

*S;fclD£ft*,, aftSasfcaafcaaLfcafcTi'*!* 
(7i-X#2) XI*. fc>*'CM\ 

y»*taa-r«**«\ u>»m«l 
a<r*«feai*. 

ioo77]«»**ji7i-x (7x-x#d rc 
x. #a<&**u>^<Msa*-*£o ******* #a 

to 

[0 0 7 8] ^-VU>^-bX7K>X^£E^^-r-l)a 

a**!*, i2>*A^e>.a>±«**aa>-b>*a»z»»t, 

«IC*y**LfcllACt UAtfVZRESi: LX, 
C#i*-b>*A*««E-r*CA:ICcfcy, 

t*0«*SH i jfcfc(DSstJC|5**B-r*o.MAC'Ctt, -te>* 

A^JUj^a^wsasRff-rsi&ii^feSA^ aa#< 
H*aafl£ttaLfcc£ic*y* ^u>vch 
■as, fr«*-e*a<fc-e**« 
[0079] »*a»Ri b a)i»^b*KWf i^ic^ 

[z+Ztclb. -fe>4r^W«tCj:y«*SL»tB»fbt* 
$fcl* % Diffie-Hellmantt^afeCO^^ftaJk^ffl 

i>fc**icj:y*»Lfc«s. «*a»o)ttt>yicMffl 
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[0080] t-* K-~xa>*£3i *mmtho -tz>£ 

r « b ' 'i wsaik r m g * * A%s^*<?>ii^T? ^ 

*<Dta»ic«fcv;*a«is**f *. ::t v #m&£<t>£ 
fifeic i*, -b > * fc **a«o>«i##a>^ t? # £ # 

[0 0 8 2] ^lr-?iE»7i-X (7i-X#2) 
I=j3tvr, -bii#_C tt, «tt«2K0)«:^«l«TilzML 

[0 0 8 3] ^;u-^GK b a>ii|fr^^-r3o -fe>* 

[0 0 8 4] ?A-ymw&»mm$iffim&o 

-x*-y, «*a»*«ncc:t**BLr. 
tfc^u-^«s, ncukrcjcyMWftu-csat'r 

[0 0 8 5] «UWMJKCM'r« # BfefifllS*?* 

s^i? * a ufc c t ft if rc cfc y . > * u > 

tD5^>K»**t>*iciBi^tt*iift«ai*ic# 



loose] fei±60 <ko\z^-%>zk \z & y , IM«t 

mottt> i )i~v>\'-ym£mmLTi^zk^&&o s 

[00 8 7] m2!C, H2 > S3, H7*#fiBLfc*< 

b, (7x-x#d (D*Mts«t 

»4Bii¥S:ii=j:y-b>^a»z^jaL, ±sss^ 

CHA b =Z b 

*«^s.2icctyai«rSo fc/=u ±»*a>bf* 

[0088] ?x— X#1 -2"C S ft«B*Tili, S3 

©a«k±«¥«ii=«fcy. i«*SL^Ri b s^t§o ^ 

■T*^-fe>*a*Z b t, ^*E^Ri b i:fc^"r^MAC 
(Message Authentication Code : / y-fe— S^BBEft. 
#) CftJfttr. «*BKXDi»>i:-rs. -Tft^^, 
Di b «MAC(Sh (i || Z b H Ri b )) 

£±mtZ>a fc*£U MAC(x, y )ii % Ix^ttot, y 
#fls*«11ICj:y % ■fe>*C<D-fe>5r^BB«Yc«.ffl^ 

Ei b = Yc[ i |j Ri b |j Di b ] 

=^Yc[i || R* b ||MAC(Si, (i ||Z b ||Ri b ))] 

RESi b -Ei b =Yc[ i II Ri b || Di b ] 

= Yc[i |! Ri b ||HAC(Si, ( i || ZM| Ri b ))] 

k lx, mm*®z ic* ya«+* B 

[0089] 7i-X#1-3t, El2(D-fe>^ Ctt, 
EI^Lftt^«*aiCcfcy, iS^Ti^bCOUXTKVXR 

r, «*a«Ri b *»S. BiSE*ttSE*S4|rJ:y, 
*TiOi»»mi8itffl^r, NMBBXDi^ttB 
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^^ULt-tLX^HX, 7i-X#1-4^I 
[0 0 9 0] 7x-X#1-4t?, -tr>^C(i, S^ID 

[0 0 9 1 ] 7i-X# 1 Cf* N £ftft 

ft**ft 
I024bitx(k+; 
**Ul/S>Stl« 0.16x (2k+1) 
UXtH>X««S 2176bit 
ux#>x±fifc3M» 0.48 
l/X7K>XttijE«*» 0.16 
T^^-^t^X 2176bitx n 

[0 0 9 5] **%&X\t, ux?K>x«rtE«)aji**Ja.^ 
#i)tt&l3lcj§LTU$o RSAflttfryfcttREIGamallfi 
5*-CI*, PKI Izfclf ^Ht^^&Mtt^fiEWft^ttS-r^ 

[0 0 9 6] ^-^|c«+4«l**A<*l^JU-^a 

& 0 -ten?, ^y<D»*0*»»*a>a*tt«0ttL 
t\ *tt*<D«H*Ti(z»Lrs tf*WMtsi£fei*NI 

[0 0 9 7] tttOk^iZ, ^^^20*ffi0ii 

«aa> y n< - ic «fc y & hhhi t <£ y 

MMftc t % mm Lx^\mm»i^t z z t x 



[0092] S3lz, 03. ■8«#ML4:tf- 

6> y)b-^«iBa (7i-x#2)-,iD»itiiii!f 
&o H8iz^t7x-x#2-r"e > -fe>#ci* % -*"ai 

ECi b =CKj b [GK b ] 

[0093] 7x-X#2-2t% ^3(7>^^Titt. 
0*LTL^SE«*©l3j:y. ^>£f®^*ECi b (== 
CKiWD &M§tl«^£#¥l$9tc£ 
tJs ^Sl^Ri b ^^a^CK^<hU -fe>*Bt^*ECi b 

(=CKi b [GK b ]) MfLt, ^;U-:7f3IGK b £?#£ 0 4« 
*TiA<, -b>^^#^CECi b (=CKi b [GK b ]) .SStflfe* 
3&^otc«^l*. 37x-X#1-2|cfc^T±J$LfcU 
X*°>XRE$£./t?>£ ClcHji-f^p 

[0 0 9 4] «*a*ttt«LTaL^«W^* 0 

1 28b i t 
& L 
1024b it 
0. 03 

0.25 #*ftO>fcKI*MAC 
1 28b i t x n 

[0 0 9 8] 

»5R*a*ft«-, izy$X, 7*>Kc?*lc4*>*SLft 

E*i:**a*fc*»T, «*ttM-C«*BEfc*tt 
BU »»**C!)KaicttfflLfc«*a»i:. D 

—a»* i DT?frojia6**a»3Wft»**tTt^«jt* 

3^o«K*E«bW*t«*fl!>JB*a«k 
l=J:yW*1««S«»ftUT-b>*l»*XfcLr«i*l= 

«B*a>#*s*tt-c*, **sa*ira«a(ii*A<a** 

a b tic 1^**.«CJ4. «H«3Ktt«ttM« « A¥-G t * ^ 
a>-e*»fc+ 6 c i 4<-c * 6 1 ^ 3 64t* • 
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[B6] **^«2OMK0)»aicSrt.«*Wl9Rj| 



[»*<DRfllJ] 

8 *»HHHMMK 
9 

11 ftMMHHbNt 



ran 



12] 





>§©»N 














Z>J3CHA£r£jEfc 






RBS *WfflEURBS 




R, b <fc£ RES 

























— — 



CBB3J 



#©5 



z — 



z 
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[04] 



(*^#) ( ^^-Xtl (fefc) ^ ) 

T I 



fc^ -r >- 5? CHA> ( = Z ,») £rJMff 



(l-2a) tl'?i»f)f' J f V. 
l' 



vs?cHA f b (=z, b ) 



(1-3b) W^stfV* 
RESj b £g{f U -feV^SflS 
48Sc t? WJXtfV* RES| b 



I 



l^T, 316(3!, { i || Z, b || 



(l-2b)ffl*&$feR j v *4y£u 5*-fi?* 
A*& SIG(S„ (i || Z, b ||R l b ))££j& 

I 



(l-2c)«*«P#3CE t b (=Yc[ i It R, b 
II D, b ])&&J$U tv^cicvxly^ 
RES, b (=E b )&a£« 





(l-4c) -A- ?^-x i= «s*sl^cr , b fcsa® 



Yea 



d-5) j&Ka&R , b z&mm c^t-rz 




Grf*E3 ( »t ) 
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[SI 6] 



3> £E 



: (2 D^y^Bf-t^C EC^-CK^SK^]) 



(l-3a)- 



3 




(2-2c) V-^/tfV* 
RES, 1 " ^-feV? C 



[06] 





mm 


















Itf JAKES feSS* 
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[0 7] 



0 



x# i M^) 



3 







1 


KSf U> v- CHA t (— Z b ) £&:{n 




(l-2a) 


1 ► 



RES i b £S«U -fey^ff^ 
#Sc t'^^yx RES," 
£«#LT, S^SLicR^ 




(l-2b)ffi*a«CR, k ££mu ^ y-fc*- 
^BWK«F*- MACCS „ ( i || Z b || R , b ) ) £ 


1 


— 


(l-2c)5S*Bt-f-5:E 1 1> ( = Yc[ i || R, b 
II D b ])£r£j£U -feV^Cti^X^VX 
RES b (=E l b >^^ 




i^-Cs mac(s„ ( i 1! zM! 







< BT ) 




(l-4c) t*- ic«m«cR > &fs» 






Yes 








4 






(l-5)i8*&&R i b 







No 



C 



15 



ims] 



(EE 



D CE 



(2-1) -fe y *Bf »3t BC^-Cl^W]) 



(l'3a)- 



X#2 



(2-2a)-trV^^6.-fe>' 













<2~2c) 




RES> %± v$ C 







Yea 



(2-2d)ffi*amR l k ^*®^CK 1 b i IT, 



(72)$gJE# £o#> F£-A(##) 5B017 AA03 BA07 

nmmmm^mimmmm=-Tm2oma sboss ae29 

^ ftjC^SS^Kjl^^^^U-r-fft 5J104 AA07 AA08 AA09 AA16 M18 

ffirfflSSffifl BA03 EA06 EA18 KA02 KA06 

02)%mm ft* m LA01 LA06 NA02 NA03 
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